$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: 5qdQA0zM4zXi53mSpDhexMnOENBoor7Ytv7YIZiPAgw= Subject key identifier: C0:3C:A9:23:7C:48:29:59:8F:8B:68:A7:B8:B6:D4:8D:E9:3C:F0:2D Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 016B Signing time: Fri 25 Apr 2025 03:29:46 +0000 Manifest this update: Fri 25 Apr 2025 03:29:46 +0000 Manifest next update: Fri 02 May 2025 03:29:46 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: 22H8y6uoJN4QhUhxTZpdDKlG0wdrr13b7LPu3nRKYng=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: Ha7uuCzrs6q52L6yqD5G/7/RQyqW/lnT9pM0rZZ1mMg=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: JS7S95pwMMq4VJCG+rsKP1S3MhXCo+P6oTggAIuVIcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: Apr 25 03:29:46 2025 GMT Not After : May 2 03:29:46 2025 GMT Subject: CN=680b01aa-ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:f9:1e:76:a4:68:8d:6f:52:9d:19:97:43: 52:98:f5:0b:b2:dd:8c:94:6c:12:bd:bc:48:8a:7a: 0c:fd:9b:11:67:8e:c8:df:1d:59:97:49:1f:bb:26: 6f:fb:a4:8f:58:84:77:59:63:af:ad:8e:d6:1e:80: ec:f3:9d:a8:9d:67:7c:6c:be:08:a9:d0:f0:8f:0c: 0b:3b:3c:f8:2d:6a:3a:db:d4:a3:07:b8:1c:bf:e8: 85:f4:8d:a2:c7:fd:b5:0f:8c:f9:4a:0c:42:15:0a: 0e:0d:a9:2d:1b:79:21:a1:6e:d3:60:40:7d:b3:68: 29:7c:05:bb:28:69:9f:0d:f1:fb:b1:57:a6:1a:8b: 40:d5:93:09:58:67:b7:e6:db:c5:03:47:7f:dd:d7: 72:db:7c:9a:e5:80:76:4c:ea:0d:ba:6c:86:92:97: f8:89:40:7e:99:c3:c4:1c:ae:03:28:7e:13:50:cf: 6a:fb:e5:c5:d0:0b:77:4a:0c:f1:ac:7c:3d:42:69: 15:0f:f5:c4:59:2c:c5:ab:c6:d7:2c:90:0a:65:99: ab:f1:32:1e:a0:04:5e:f0:f5:90:d8:4e:31:c2:9d: ce:46:2d:57:fd:30:f2:1f:0a:3a:c8:be:c1:d6:80: 4a:66:c7:69:92:89:3c:5e:38:a4:d0:72:9a:f6:1a: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3C:A9:23:7C:48:29:59:8F:8B:68:A7:B8:B6:D4:8D:E9:3C:F0:2D X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:75:93:0a:15:3b:12:0e:c4:1a:f6:62:97:6c:b7:77:75:de: 0a:50:77:ff:21:93:53:63:f8:84:93:ba:87:5d:ba:0c:c1:06: 0c:3a:72:0a:4e:0e:9f:e0:43:7a:e0:e4:fb:62:cf:b7:04:42: 3b:b4:fc:a4:65:5e:09:71:c3:2b:9f:43:84:19:03:fd:a0:5b: 94:4f:3f:ff:89:40:b1:a2:fc:65:e5:18:35:91:be:8a:b4:f0: ff:10:b4:11:77:a0:f6:c3:e7:20:ec:6e:af:9d:3e:bc:bd:f4: 53:06:5a:e4:a6:71:1c:34:fe:52:46:44:87:f6:27:34:f4:47: 0e:55:33:4f:46:b2:b8:a3:cc:96:0e:62:04:1d:8c:79:24:40: 1f:19:cd:3e:40:7c:92:eb:6b:8f:53:1c:50:8e:08:f9:40:bc: d8:3a:1b:d6:02:09:40:96:09:df:ed:e3:1d:9e:ac:c2:54:b8: 13:5b:39:e8:f4:db:d3:ac:ba:5d:35:8a:43:79:43:27:ac:dd: 42:d8:e8:d4:71:e4:55:50:3d:06:22:b2:f0:03:05:c2:51:6a: fa:ee:57:12:11:12:39:f9:0e:3b:d8:94:4c:d9:1c:91:93:3f: 40:60:8b:2a:ec:49:8a:a4:6d:f6:b4:91:6c:fa:4d:44:25:16: eb:d4:21:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUwNDI1MDMyOTQ2WhcNMjUwNTAyMDMyOTQ2WjAYMRYwFAYD VQQDEw02ODBiMDFhYS1hYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Uj5HnakaI1vUp0Zl0NSmPULst2MlGwSvbxIinoM/ZsRZ47I3x1Zl0kfuyZv +6SPWIR3WWOvrY7WHoDs852onWd8bL4IqdDwjwwLOzz4LWo629SjB7gcv+iF9I2i x/21D4z5SgxCFQoODaktG3khoW7TYEB9s2gpfAW7KGmfDfH7sVemGotA1ZMJWGe3 5tvFA0d/3ddy23ya5YB2TOoNumyGkpf4iUB+mcPEHK4DKH4TUM9q++XF0At3Sgzx rHw9QmkVD/XEWSzFq8bXLJAKZZmr8TIeoARe8PWQ2E4xwp3ORi1X/TDyHwo6yL7B 1oBKZsdpkok8Xjik0HKa9hq/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA8qSN8 SClZj4top7i21I3pPPAtMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcdZMKFTsSDsQa9mKXbLd3dd4KUHf/IZNTY/iEk7qHXboMwQYMOnIK Tg6f4EN64OT7Ys+3BEI7tPykZV4JccMrn0OEGQP9oFuUTz//iUCxovxl5Rg1kb6K tPD/ELQRd6D2w+cg7G6vnT68vfRTBlrkpnEcNP5SRkSH9ic09EcOVTNPRrK4o8yW DmIEHYx5JEAfGc0+QHyS62uPUxxQjgj5QLzYOhvWAglAlgnf7eMdnqzCVLgTWzno 9NvTrLpdNYpDeUMnrN1C2OjUceRVUD0GIrLwAwXCUWr67lcSERI5+Q472JRM2RyR kz9AYIsq7EmKpG32tJFs+k1EJRbr1CGm -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:22 2025 by rpki-client